Prune2000

prune2000.github.io

My security blog: CTF writeups, pentesting experiments, network forensics, and a long chaotic list of tools. https://prune2000.github.io/

ripasso

A simple password manager written in Rust

plum-budget

Plum Budget is built using the MERN stack (MongoDB, Express, React/Redux, Node.js). The goal is to build a secure and confidential budget app.

h4cker

This repository is primarily maintained by Omar Santos and includes resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

SlackMass

Scripting subdomain enumeration with Amass with slack alerts

Courses-and-Tutorials

All my projects made during courses and tutorials (HTML, CSS, JavaScript, and JQuery)

GTFOScanner

A python scanner used for privesc on linux servers to find SUID programs and compare them to GTFOBins (https://gtfobins.github.io/)

lila

♞ lichess.org: the forever free, adless and open source chess server ♞

nmap_tutorial

Some collected notes about nmap

OWASP-Testing-Checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

python-programs

Few infosec programs developed poorly

33-js-concepts

📜 33 concepts every JavaScript developer should know.

alive-host

AliveHost is a simple bash script that takes a list of hosts (Ex: from Sublist3r) and checks to see if they're up / alive!

Amass

In-depth Attack Surface Mapping and Asset Discovery

Budget-app

Practicing JavaScript by building a budget app

CoinPlum

Project to train asynchronous JavaScript by building a website from scratch fetching info on cryptocurrencies using Coinpaprika's API.

encryptic

An encryption-focused open source note taking application

encryptic-website

Assets for the non-app portion of encryptic.org

enumit

This tool was created in order to automate some basic OSINT tasks for penetration testing assingments. The main feature that I haven't seen much anywhere is the downloadd google dork function where this function first perform basic google dorking to find the targets public documents. These documents will then be downloaded to the attackers computer and can be used further to identify metadata about the client.

lachessconnection

Web based version of the iOS app of La Chess Connection

lichess-layout

SpaceGame

A small and ugly game I coded in JavaScript to practice

sslScrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.